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Background -bo the Invention 

This invention relates to a method and apparatus for 
authenticating printed documents. 

It is frequently required to provide some way of checking the 
authenticity of printed documents, to confirm that the document 
has been issued from a particular source, and that the 
information in it has not been tampered with. In particular, 
such authentication may be required for certificates of various 
kinds . 

As an example, in the UK it is a requirement that any road 
vehicle over three years old should have a test certificate, 
referred to as an MOT certificate. These certificates are 
issued by licensed vehicle testing stations, following an 
inspection of the vehicle to check its roadworthiness and 
compliance with legal requirements. The certificate must be 
presented at a post office when the owner of the vehicle re- 
licenses it. Clearly, the post office should check that the 
certificate is not a forgery, and that the information in it has 
not been altered. At present, the post office clerk does this 
simply by making a visual check. 

The object of the invention is to provide an improved method for 
authenticating printed documents. 

Summary of the Invention 

According to the invention a method for authenticating a printed 
document comprises the following steps: 

a) a document producer sends information to be included in a 
document to an authentication authority; 
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b) the authentication authority cryptographically generates an 
authentication code from this information, and sends the 
authentication code back to the document producer; 

c) the document producer prints the document, including both the 
information and the authentication code; and 

d) a document checker cryptographically checks the authentication 
code against the information in the document. 

In the MOT certificate example described above, the document 
producer would be the vehicle testing station, the 
authentication authority may be a central agency run by (or with 
powers delegated by) the government Vehicle Inspectorate (VI), 
and the document checker may be the post office at which the MOT 
is presented. 

The authentication code may be generated and checked using a 
cryptographic key associated with the authentication authority. 
A secret key, known to both the authentication authority and the 
document checker, may be used. Alternatively, a public/private 
key pair may be used where the authentication code is generated 
using the authentication authority's private key and checked 
using its public key. 

One document authentication method in accordance with the 
invention will now be described by way of example with reference 
to the accompanying drawings. 

Brief Description of the Drawings 

Figure 1 is a schematic diagram of a system for issuing and 
authenticating certificates . 

Figure 2 is a flow chart showing the operation of a software 
component for issuing certificates. 
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Figure 3 is a schematic diagram showing a certificate produced 
by the system. 

Description of an Embodiment of the Invention 

Referring to Figure 1, the system involves the following 
entities : 

■ VI Data Centre 101. This is a central agency, run by the 
Vehicle Inspectorate (VI). 

■ Vehicle testing stations (VTS) 102. These are authorised by 
the VI to test vehicles and to issue MOT certificates. Each 
vehicle testing station may employ one or more authorised 
vehicle testers to carry out the tests. 

■ Post Offices 103. 

The VI Data Centre includes a central server computer 104, and a 
database 105. The database holds details of all licensed 
vehicles, vehicle testing stations, and authorised vehicle 
testers. The VI Data Centre has a secret key, referred to 
herein as the VI secret key, which in this example is known to 
both the VI data centre and the post offices. 

Each of the vehicle testing stations 102 has a computer terminal 
106, which can communicate with the central server 104 by way of 
a network 107. The terminal is connected to a printer 108, 
which is used for printing the MOT test certificates 109. The 
printer 108 incorporates a barcode scanner, so that it can read 
barcodes on blank certificates inserted into the printer. 

Each of the terminals 106 includes communications software, 
which manages communications between terminal and the central 
server. All communications between terminal and the central 
server are encrypted, to ensure that messages cannot be 
intercepted. In addition, security technology is used to verify 
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the authenticity of both ends of the link, to prevent a rogue 
device from linking into the network and pretending to be a 
terminal . 

In operation, a vehicle tester can enter information relating to 
a particular vehicle test into the terminal. The terminal 
includes a function which allows the vehicle tester to confirm 
the results of a test and, if the results are confirmed, to 
print a test certificate or failure notice as appropriate. 
Figure 2 shows this function in more detail. 

(Step 201) The function first displays the test information, 
with the overall result (pass or fail) summarised. 

(Step 202) The function then asks the tester to confirm whether 
or not the test results are correct. If they are not correct, 
the function exits, and the tester may then go back to change 
the test information. 

(Step 203) If the tester confirms that the results are correct, 
the function then branches according to the test result. 

(Step 204) If the test result was "pass", the function prompts 
the user to specify whether the test certificate is to be 
printed locally, at the test station, or mailed directly from 
the VI Data Centre to the registered keeper of the vehicle. 

(Step 205) If the test certificate is to be printed locally, the 
function prompts the user to feed a blank pass certificate into 
the printer 108. Each blank pass certificate has a unique pre- 
printed serial number, and a barcode containing the serial 
number, as well as other security features such as a watermark. 
The VI keeps a record of the serial numbers of the certificates 
issued to each testing station, so that each certificate can be 
traced back to a particular testing station. 
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(Steps 206-207) When the certificate is in the printer, the 
function instructs the barcode scanner incorporated in the 
printer to scan in the certificate serial number. The terminal 
then transmits a message to the central server. The message 
contains details of the tester and the test station, the 
certificate serial number, the vehicle details, and the test 
results . 

When the central server 104 receives this message, it performs a 
final check to confirm that the tester and the vehicle test 
station are duly authorised to perform the test. 

Assuming this check is satisfactory, the central server proceeds 
as follows. First, it generates a message authentication code 
(MAC) from a predetermined sub-set of information in the 
message. In this example, the MAC is generated by performing a 
key-dependent one-way hash of the information, using the VI 
secret key. The central server transmits this MAC back to the 
terminal . 

(Step 208) When the terminal receives the MAC, it prints the 
certificate. The contents of the certificate are described 
below. 

(Step 209) If on the other hand the test certificate is to be 
mailed directly to the registered keeper of the vehicle, the 
function transmits the test information to the central server, 
with a request for a mailed certificate. The central server 
performs checks as described above, and if these checks are 
satisfactory, prints the certificate. 

(Steps 210 - 212) If the test result was "failure", the function 
prompts the user to feed a blank failure notice into the 
printer. The function then transmits the test information to 
the central server, and prints the failure notice. 
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Figure 3 shows the format of the certificate. It includes the 
following : 

■ Pre-printed certificate serial number 301, and pre-printed 
barcode (not shown) containing this serial number. 

■ Test date 302 

■ Expiry date of certificate 303. 

■ Vehicle details 304. 

■ MAC 305, as a string of characters. 

■ Bar code 306, representing the MAC in bar code form. 

Referring again to Figure 1, each of the Post Offices 103 is 
provided with at least one terminal 112, having a bar code 
reader 113. It is assumed that the terminal has knowledge of 
the VI secret key. 

When a vehicle owner presents an MOT certificate at the post 
office, the post office clerk uses the bar code reader 113 to 
scan the bar code 306 on the certificate, so as read the MAC 
into the terminal. 

The clerk also types in the predetermined sub-set of information 
from the certificate (i.e. the same sub-set as used by the 
central server to generate the MAC) . The terminal then uses 
this information, along with the VI secret key, to generate a 
MAC, and compares this with the MAC read from the bar code. If 
they are not equal, the terminal generates a message to alert 
the clerk. 

If for any reason the bar code reader will not read the bar 
code, the clerk may type the MAC into the terminal, from the 
printed version of the VI signature. 

In summary, it can be seen that the system described above 
allows a certificate to be authenticated quickly and easily. 
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Some possible modifications 
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It will be appreciated that many modifications may be made to 
the system described above without departing from the scope of 
the present invention. For example, instead of using a secret 
key to form the MAC and to check it, a public/private key pair 
may be used. In this case, the authentication code is generated 
using the authentication authority's private key and checked 
using its public key. 

Instead of requiring the clerk to type information from the 
certificate into the terminal, the information could be scanned 
in . 

Instead of requiring the clerk to scan or key in the MAC from 
the certificate, the terminal may display the MAC it has 
generated, so that the clerk can visually compare this with the 
MAC printed on the certificate. 

The vehicle test station could be arranged to authenticate the 
previous year's certificate, before generating a new one. 

It should be noted that the invention is not restricted to 
issuing of MOT certificates as described above, but can be used 
in any application where it is required to authenticate a 
printed document. 
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1. A method for authenticating a printed document comprising 
the following steps: 

a) a document producer sends information to be included in a 
document to an authentication authority; 

b) the authentication authority cryptographically generates an 
authentication code from this information, and sends the 
authentication code back to the document producer; 

c) the document producer prints the document, including both the 
information and the authentication code; and 

d) a document checker cryptographically checks the authentication 
code against the information in the document. 

2. A method according to Claim 1 wherein the document producer 
includes a bar code in the document, said bar code containing 
the authentication code, and wherein the document authenticator 
is provided with means for reading the bar code to obtain the 
authentication code . 

3. A method according to Claim 1 wherein the document includes a 
pre-printed serial number, which is sent to said authentication 
authority, and wherein said authentication authority uses said 
pre-printed serial number in generating said authentication 
code . 

4. A method according to Claim 3 wherein said pre-printed serial 
number is included in said document as a pre-printed bar code. 

5. A method according to Claim 4 wherein the document producer 
uses a combined printer and bar-code scanner to read said pre- 
printed bar code and then to print said document. 
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6. A method according to Claim 1 wherein said document checker 
performs the following steps: 

a) entering said authentication code into a computer; 

b) entering information in the document into the computer; 

c) causing the computer to cryptographically generate a check 
code from said information; and 

d) causing the computer to compare said check code with said 
authentication code and to generate a warning indication if said 
check code does not correspond with said authentication code. 

7. A method according to Claim 1 wherein said authentication 
authority cryptographically generates said authentication code 
using a cryptographic key associated with said authentication 
authority. 

8. A method according to Claim 7 wherein said cryptographic key 
is a secret key known to both the authentication authority. 

9. A method according to Claim 8 wherein said authentication 
code is generated by performing a key-dependent one-way hash of 
said information, using said secret key. 

10. A method according to Claim 7 wherein said authentication 
authority generates said authentication code using the private 
key of a public/private key pair, and wherein the document 
checker checks the authentication code using the public key of 
said public/private key pair. 

11. A method according to Claim 1 wherein communication between 
said document producer and said authentication authority is 
protected by encryption. 

12. A method according to Claim 1 wherein the document producer 
can specify an option of having the certificate printed by said 
authentication authority instead of printing the certificate 
locally . 
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13. Apparatus for authenticating a printed document, 
comprising : 

a) a plurality of document producer stations; 

b) at least one authentication service; and 

c) a plurality of document checker stations; 

d) wherein each document producer station includes means for 
inputting information to be included in a document, and means 
for sending said information to said authentication service; 

e) wherein the authentication service includes means for 
cryptographically generating an authentication code from this 
information, and means for sending the authentication code 
back to the document producer staion; 

f ) wherein each document producer station includes means for 
printing the document, including both the information and the 
authentication code; 

g) and wherein each document checker station includes means for 
cryptographically checking the authentication code against the 
information in the document. 

14. Apparatus according to Claim 13 wherein each of said 
document producer stations includes a combined printer and bar 
code scanner for reading from said document a pre-printed bar 
code containing a serial number. 

15. Apparatus according to Claim 13 wherein each of said 
document producer stations includes means for printing bar codes 
on documents, and wherein each of said document checker stations 
includes a bar code reader for reading bar codes from documents. 
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ABSTRACT 



A method for authenticating a printed document is described. A 
document producer sends information to be included in a document 
to an authentication authority. The authentication authority 
cryptographically generates an authentication code from this 
information, and sends the authentication code back to the 
document producer. The document producer then prints the 
document, including both the information and the authentication 
code, and a bar code representing the authentication code. A 
document checker scans in the bar code, and cryptographically 
checks the authentication code against the information in the 
document . 
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